$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/2744f7f5-ab18-3de3-b244-bc520f20d607.roa File: 2744f7f5-ab18-3de3-b244-bc520f20d607.roa (raw, json) Hash identifier: W4JiFC70cIxvAy2uTkM9oprcIJe/tuzw39cifW+FNSI= Subject key identifier: 14:B6:C2:44:00:80:BE:88:73:D0:66:C6:76:4E:EC:31:23:2B:45:15 Certificate issuer: /CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0 Certificate serial: 010D0C9F4328584AD7D11DA8C30979CCA5591700 Authority key identifier: 66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/2744f7f5-ab18-3de3-b244-bc520f20d607.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 40230 IP address blocks: 2604:cf00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:1d:a8:c3:09:79:cc:a5:59:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=0da4fda8-9609-4f65-b768-6df601d5c7a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0e:fe:1f:ff:2b:1d:f1:95:7a:a9:8a:15:8a: c2:19:53:4a:e2:1d:d7:bb:a8:e3:c8:09:20:46:be: ef:b2:42:97:5d:1e:4a:3d:b0:38:26:28:5c:8a:b5: e3:2d:d1:d0:6a:9b:44:9f:76:11:f3:eb:d7:e6:f2: a6:49:aa:4f:21:84:93:69:71:de:3c:b9:71:f0:63: 0d:4c:08:d8:eb:f4:08:e8:51:d2:3e:02:30:6c:8c: 58:35:b0:20:13:ad:f8:45:1d:80:45:e8:81:30:90: 4a:8d:df:fd:8f:98:66:7d:6b:5a:95:5f:69:85:b0: 62:ee:62:83:32:22:71:9f:ba:40:36:0b:99:de:3e: 2d:44:9e:30:9d:06:0d:b1:25:cc:61:0b:75:c5:3c: 40:4c:90:14:ec:76:4d:45:52:e7:97:c5:11:cf:68: ac:7f:8a:39:bf:64:3a:b1:65:87:6d:ed:a4:a4:80: 35:60:ba:be:ea:2b:e9:7d:d6:bb:a2:cb:f7:24:6b: 4d:00:45:41:01:22:a1:97:ec:5c:f1:80:43:50:94: 84:44:5a:be:c4:39:4c:c9:16:27:26:7a:78:bc:f8: 1b:24:7d:ce:91:14:23:5d:f3:22:ee:bf:ff:c1:28: 87:9d:fc:dd:ea:93:d0:46:c5:3d:87:aa:82:7a:96: b5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B6:C2:44:00:80:BE:88:73:D0:66:C6:76:4E:EC:31:23:2B:45:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/2744f7f5-ab18-3de3-b244-bc520f20d607.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.crl X509v3 Authority Key Identifier: keyid:66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer sbgp-ipAddrBlock: critical IPv6: 2604:cf00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:9d:39:ba:21:87:e4:fd:d5:77:d6:a6:39:6c:f3:53:24:43: 40:9a:aa:4e:0e:bd:92:43:39:d8:2f:ef:79:31:70:b8:e3:2e: eb:49:14:35:ea:30:24:e1:83:61:a6:29:61:fa:bd:92:cc:fd: e5:ca:3b:15:bd:c5:71:51:94:f0:3a:33:4d:1f:93:e6:df:1a: 4c:5a:04:8f:44:ab:77:46:23:9a:60:5b:c8:e9:d9:a8:b5:0a: f0:5d:55:f1:41:f5:ce:de:35:87:5d:21:a9:fd:c3:f1:eb:e1: f6:45:37:a7:da:6f:2a:c2:c4:06:1d:a7:82:45:fe:a9:c6:5e: 49:4d:7d:af:36:8c:29:2d:3c:c9:a8:bf:0b:79:e6:4d:1c:f6: 19:5e:47:e9:26:2f:f8:78:38:11:93:14:43:f6:15:e5:ec:fa: 2c:e5:5c:ea:22:9e:60:4f:e1:1e:55:60:b6:06:46:e6:a8:0d: 2c:27:1d:dc:19:b7:9c:80:26:c6:b4:48:f7:85:aa:fa:17:0e: 53:98:d2:50:32:e9:ef:c3:bf:a4:03:c4:f1:ee:54:16:d2:a1: bb:77:07:6c:2c:23:35:98:32:2a:43:b7:a0:8c:29:4f:fc:a4: d5:b2:41:e6:0a:05:31:e0:37:1b:16:a3:1a:7d:0f:7e:ce:05: 2d:a3:b1:95 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErX0R2owwl5zKVZFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2MxYjA5NjQtYmQ5Yy00OTMxLWE1M2QtZTJhNDM0YmMy YWYwMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk MGRhNGZkYTgtOTYwOS00ZjY1LWI3NjgtNmRmNjAxZDVjN2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow7+H/8rHfGVeqmKFYrCGVNK4h3Xu6jjyAkg Rr7vskKXXR5KPbA4JihcirXjLdHQaptEn3YR8+vX5vKmSapPIYSTaXHePLlx8GMN TAjY6/QI6FHSPgIwbIxYNbAgE634RR2AReiBMJBKjd/9j5hmfWtalV9phbBi7mKD MiJxn7pANguZ3j4tRJ4wnQYNsSXMYQt1xTxATJAU7HZNRVLnl8URz2isf4o5v2Q6 sWWHbe2kpIA1YLq+6ivpfda7osv3JGtNAEVBASKhl+xc8YBDUJSERFq+xDlMyRYn Jnp4vPgbJH3OkRQjXfMi7r//wSiHnfzd6pPQRsU9h6qCepa1KwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBS2wkQAgL6Ic9BmxnZO7DEjK0UVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YzFi MDk2NC1iZDljLTQ5MzEtYTUzZC1lMmE0MzRiYzJhZjAvMjc0NGY3ZjUtYWIxOC0z ZGUzLWIyNDQtYmM1MjBmMjBkNjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2MxYjA5NjQtYmQ5Yy00OTMxLWE1 M2QtZTJhNDM0YmMyYWYwLzdjMWIwOTY0LWJkOWMtNDkzMS1hNTNkLWUyYTQzNGJj MmFmMC5jcmwwHwYDVR0jBBgwFoAUZm9+jBVfjJQ0BiEb+7xNwWzYhYUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YzFiMDk2NC1iZDljLTQ5MzEtYTUzZC1lMmE0 MzRiYzJhZjAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTPADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQANnTm6IYfk/dV31qY5bPNTJENAmqpODr2SQznYL+95MXC44y7rSRQ1 6jAk4YNhpilh+r2SzP3lyjsVvcVxUZTwOjNNH5Pm3xpMWgSPRKt3RiOaYFvI6dmo tQrwXVXxQfXO3jWHXSGp/cPx6+H2RTen2m8qwsQGHaeCRf6pxl5JTX2vNowpLTzJ qL8LeeZNHPYZXkfpJi/4eDgRkxRD9hXl7Pos5VzqIp5gT+EeVWC2BkbmqA0sJx3c GbecgCbGtEj3har6Fw5TmNJQMunvw7+kA8Tx7lQW0qG7dwdsLCM1mDIqQ7egjClP /KTVskHmCgUx4DcbFqMafQ9+zgUto7GV -----END CERTIFICATE-----Generated at Wed Aug 20 23:30:47 2025 by rpki-client